<!DOCTYPE html
  PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "DTD/xhtml1-strict.dtd">
<html>
  <head>
    <title>volatility.plugins.gui.win32k_core.tagDESKTOP.windows : API documentation</title>
    <meta content="text/html;charset=utf-8" http-equiv="Content-Type" />
    <link href="apidocs.css" type="text/css" rel="stylesheet" />
    
    
  </head>
  <body>
    <h1 class="method">v.p.g.w.t.windows(self, win, filter=True, level=0) : method documentation</h1>
    <p>
      <span id="part">Part of <a href="volatility.html">volatility</a>.<a href="volatility.plugins.html">plugins</a>.<a href="volatility.plugins.gui.html">gui</a>.<a href="volatility.plugins.gui.win32k_core.html">win32k_core</a>.<a href="volatility.plugins.gui.win32k_core.tagDESKTOP.html">tagDESKTOP</a></span>
      
      
    </p>
    <div>
      
    </div>
    <div>Traverses windows in their Z order, bottom to top.</p>
<p>&#64;param win: an HWND to start. Usually this is the desktop
window currently in focus.</p>
<p>&#64;param filter: a callable (usually lambda) to use for filtering
the results. See below for examples:</p>
<p># only print subclassed windows
filter = lambda x : x.lpfnWndProc == x.pcls.lpfnWndProc</p>
<p># only print processes named csrss.exe
filter = lambda x : str(x.head.pti.ppi.Process.ImageFileName).lower()                                 == &quot;csrss.exe&quot; if x.head.pti.ppi else False</p>
<p># only print processes by pid
filter = lambda x : x.head.pti.pEThread.Cid.UniqueThread == 0x1020</p>
<p># only print visible windows
filter = lambda x : 'WS_VISIBLE' not in x.get_flags()<table class="fieldTable"></table></div>

    
    
    <div id="splitTables">
      
      
      
    </div>
    
    
    

    
    <address>
      <a href="index.html">API Documentation</a> for Volatility 2.2, generated by <a href="http://codespeak.net/~mwh/pydoctor/">pydoctor</a> at 2013-06-24 15:16:10.
    </address>
  </body>
</html>